📝 Add docker doc

Author: ZihaoZhou

docs/guide/limit.md

@@ -72,8 +72,7 @@ It is technically feasible to create a Docker container inside your container, b
 
 > LXC upstream's position is that those containers aren't and cannot be root-safe. They are still valuable in an environment where you are running trusted workloads or where no untrusted task is running as root in the container. —— [Linux Containers - LXC - Security](https://linuxcontainers.org/lxc/security/)
 
-Our position is Docker-based development should be deployed to the Nautilus cluster. However, you may request privilege on a short term basis with valid reason (e.g., to build a Docker image for your accepted paper).
-
+Our position is Docker-based development should be deployed to the Nautilus cluster. However, you may request privilege on a short term basis with valid reason (e.g., to build a Docker image for your accepted paper). However, docker overlay2 storage driver [does not work well with LXC](https://discuss.linuxcontainers.org/t/problem-running-docker-inside-lxc-container/10392), so you may need to downgrade docker to 2.3.0 in order to use the removed `overlay` driver. See [Troubleshooting](/troubleshooting.md) for more information.
 
 
 ## Firewall

docs/guide/troubleshooting.md

@@ -38,6 +38,48 @@ $ ssh -fN -L 3389:localhost:3340 ubuntu@roselab1.ucsd.edu -p port -i /path/to/ke
 $ # You can then connect to RDP at rdp://localhost:3340
 ```
 
+## Docker in Container
+
+You may see the following error when trying to pull a Docker image in your container:
+
+```bash
+Pulling netflow  ... extracting (100.0%)
+ERROR: failed to register layer: Error ...
+```
+
+This is because the Docker's latest overlay2 storage driver does not work well with LXC. However, the legacy `overlay` driver has been removed from Docker 2.4.0. You can downgrade Docker to 2.3.0 to use the `overlay` driver. 
+
+#### Solution
+
+First, remove your existing Docker installation.
+
+```bash
+sudo systemctl stop docker
+sudo apt-get remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+```
+
+Then, install Docker 2.3.0.
+
+```bash
+sudo apt-get update
+sudo apt-get install docker-ce=5:23.0.0-1~ubuntu.22.04~jammy docker-ce-cli=5:23.0.0-1~ubuntu.22.04~jammy containerd.io docker-buildx-plugin docker-compose-plugin
+```
+
+Start the Docker service and verify the installation.
+
+```bash
+sudo systemctl start docker
+docker --version
+```
+
+Pin the package version to prevent automatic upgrades:
+
+```bash
+sudo apt-mark hold docker-ce docker-ce-cli
+```
+
+Now you can pull Docker images in your container.
+
 ## Machine Learning Threshold
 
 We recommend the our users to regularly inspect their [resource usage](http://roselab1.ucsd.edu) during GPU tasks to optimize their tasks.